
$ rpki-client -vvf rpki-repo.registro.br/repo/7G3svKhDmdj3b7mrTfaTdsyrLMKPYANMRmzmMU69QaNh/0/C87A68538669B5BE6143466DC5BDBD7D31975E45.mft
File: C87A68538669B5BE6143466DC5BDBD7D31975E45.mft (raw, json)
Hash identifier: ac3tjCFeEnoWxB7vAfu/2OfETkQAaM0oS2s2H1R8gnE=
Subject key identifier: 14:68:47:8F:7D:9A:B3:69:1A:02:37:95:A0:35:65:2E:C9:3E:E7:14
Authority key identifier: C8:7A:68:53:86:69:B5:BE:61:43:46:6D:C5:BD:BD:7D:31:97:5E:45
Certificate issuer: /CN=C87A68538669B5BE6143466DC5BDBD7D31975E45
Certificate serial: 6CA9C552E5EF07E77C0DB253DC28F02A4F71C4B2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C87A68538669B5BE6143466DC5BDBD7D31975E45.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7G3svKhDmdj3b7mrTfaTdsyrLMKPYANMRmzmMU69QaNh/0/C87A68538669B5BE6143466DC5BDBD7D31975E45.mft
Manifest number: D2
Signing time: Fri 17 Apr 2026 08:35:24 +0000
Manifest this update: Fri 17 Apr 2026 08:30:24 +0000
Manifest next update: Sat 18 Apr 2026 09:28:24 +0000
Files and hashes: 1: C87A68538669B5BE6143466DC5BDBD7D31975E45.crl (hash: igqOOdoYmIqNb6yBHaOoI/LGo+BdOq6kMWP7mTRcR1c=)
2: 34352e3137332e3130382e302f32322d3234203d3e20323638383035.roa (hash: X7QlMTz6N4fe7q4dxIenADV1Sv+UWtxESzfd1MPsPmE=)
3: 323830343a356165633a3a2f33322d3336203d3e20323638383035.roa (hash: gQYQgigdjG9hGxCrIK3/hLLGQTCD0Fvfl5lxlDq2+JM=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/7G3svKhDmdj3b7mrTfaTdsyrLMKPYANMRmzmMU69QaNh/0/C87A68538669B5BE6143466DC5BDBD7D31975E45.crl
rsync://rpki-repo.registro.br/repo/7G3svKhDmdj3b7mrTfaTdsyrLMKPYANMRmzmMU69QaNh/0/C87A68538669B5BE6143466DC5BDBD7D31975E45.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C87A68538669B5BE6143466DC5BDBD7D31975E45.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 18 Apr 2026 09:28:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:a9:c5:52:e5:ef:07:e7:7c:0d:b2:53:dc:28:f0:2a:4f:71:c4:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C87A68538669B5BE6143466DC5BDBD7D31975E45
Validity
Not Before: Apr 17 08:30:24 2026 GMT
Not After : Apr 18 09:28:24 2026 GMT
Subject: CN=1468478F7D9AB3691A023795A035652EC93EE714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5d:91:f7:ef:8b:35:6b:67:d8:3d:be:b8:2e:
b1:8d:44:b1:29:bf:01:f4:bc:89:8d:f7:de:c4:35:
b9:0c:4a:6e:79:ec:97:05:9a:0d:71:d4:c2:8a:cd:
0a:57:bd:0c:22:65:30:58:7a:10:1e:16:9a:de:11:
3b:e1:c0:66:82:95:af:ea:bf:57:d8:8b:58:5f:ed:
13:68:15:6b:5a:a7:11:8f:42:3a:24:68:c3:10:c5:
14:94:67:fc:27:b3:82:4f:2b:5c:1c:3e:47:15:fd:
90:55:23:a4:50:62:8e:1d:c3:e0:24:2f:cd:a8:8c:
fd:b7:c2:11:28:04:59:af:f3:c8:8a:a1:65:01:2b:
48:e1:4b:d7:4d:1f:9e:5c:9d:ff:7f:1e:4a:86:41:
87:ee:e0:52:ec:e2:16:fe:12:fc:c5:94:2d:94:84:
40:ef:eb:57:e2:24:4c:1c:83:79:11:8b:9e:2b:b2:
3e:7d:41:64:c3:7b:d1:e8:dc:91:96:42:ff:39:90:
fd:f7:8c:10:6c:b1:b1:2a:21:a5:41:fb:cc:05:20:
60:ed:5f:69:43:e2:b8:94:75:60:02:47:aa:de:b4:
64:c6:4a:a7:47:e9:11:24:db:a5:8a:42:60:e0:2a:
f0:e9:36:0d:28:0e:c7:c7:92:df:f9:18:d2:a1:9c:
44:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:68:47:8F:7D:9A:B3:69:1A:02:37:95:A0:35:65:2E:C9:3E:E7:14
X509v3 Authority Key Identifier:
keyid:C8:7A:68:53:86:69:B5:BE:61:43:46:6D:C5:BD:BD:7D:31:97:5E:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7G3svKhDmdj3b7mrTfaTdsyrLMKPYANMRmzmMU69QaNh/0/C87A68538669B5BE6143466DC5BDBD7D31975E45.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C87A68538669B5BE6143466DC5BDBD7D31975E45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7G3svKhDmdj3b7mrTfaTdsyrLMKPYANMRmzmMU69QaNh/0/C87A68538669B5BE6143466DC5BDBD7D31975E45.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:f9:59:fd:2e:e5:e5:f8:0e:34:29:34:bb:42:27:1c:b2:31:
b0:78:1d:0f:55:30:65:c1:57:af:df:3d:42:60:dd:8b:9a:0e:
25:f8:90:80:ba:a0:ee:45:6c:2b:7a:7c:ec:85:5e:f2:c3:58:
35:33:d0:8a:e3:38:c4:a6:7f:25:00:96:2d:08:35:9c:c6:30:
56:58:d9:ab:8c:e9:c4:0f:65:ad:a9:7b:d3:4c:10:4a:90:83:
b7:54:a9:6b:f8:cb:29:3d:e4:44:44:e1:df:4a:20:ce:31:d4:
1f:17:43:7e:50:52:95:5d:9c:9f:e3:f3:b1:e5:41:3f:34:89:
c4:ea:b0:cb:21:7e:38:ad:1e:ee:29:02:16:81:09:37:b0:74:
7d:67:7f:be:9d:8e:a1:75:1d:04:e0:25:ba:e0:eb:4a:f2:d0:
65:14:60:17:87:10:2e:b8:e1:89:17:4d:89:b8:46:83:d8:6b:
62:11:2f:72:24:ad:cb:78:c4:bb:1a:7a:b2:ce:0d:f2:a3:4c:
bc:3e:c7:6e:8f:9d:59:5a:34:b3:69:28:15:89:e1:d8:e9:b4:
02:fe:38:14:b5:3d:bc:64:86:5b:45:e0:da:03:13:a5:93:21:
45:ca:45:8f:18:c0:06:e0:48:e7:e9:65:4f:0b:a3:7e:e7:43:
18:c4:00:ce
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUbKnFUuXvB+d8DbJT3CjwKk9xxLIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzg3QTY4NTM4NjY5QjVCRTYxNDM0NjZEQzVCREJEN0Qz
MTk3NUU0NTAeFw0yNjA0MTcwODMwMjRaFw0yNjA0MTgwOTI4MjRaMDMxMTAvBgNV
BAMTKDE0Njg0NzhGN0Q5QUIzNjkxQTAyMzc5NUEwMzU2NTJFQzkzRUU3MTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvXZH374s1a2fYPb64LrGNRLEp
vwH0vImN997ENbkMSm557JcFmg1x1MKKzQpXvQwiZTBYehAeFpreETvhwGaCla/q
v1fYi1hf7RNoFWtapxGPQjokaMMQxRSUZ/wns4JPK1wcPkcV/ZBVI6RQYo4dw+Ak
L82ojP23whEoBFmv88iKoWUBK0jhS9dNH55cnf9/HkqGQYfu4FLs4hb+EvzFlC2U
hEDv61fiJEwcg3kRi54rsj59QWTDe9Ho3JGWQv85kP33jBBssbEqIaVB+8wFIGDt
X2lD4riUdWACR6retGTGSqdH6REk26WKQmDgKvDpNg0oDsfHkt/5GNKhnEShAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUFGhHj32as2kaAjeVoDVlLsk+5xQwHwYDVR0j
BBgwFoAUyHpoU4Zptb5hQ0Ztxb29fTGXXkUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN0czc3ZLaERtZGozYjdtclRmYVRkc3lyTE1LUFlBTk1SbXptTVU2OVFh
TmgvMC9DODdBNjg1Mzg2NjlCNUJFNjE0MzQ2NkRDNUJEQkQ3RDMxOTc1RTQ1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M4N0E2ODUzODY2OUI1QkU2
MTQzNDY2REM1QkRCRDdEMzE5NzVFNDUuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
N0czc3ZLaERtZGozYjdtclRmYVRkc3lyTE1LUFlBTk1SbXptTVU2OVFhTmgvMC9D
ODdBNjg1Mzg2NjlCNUJFNjE0MzQ2NkRDNUJEQkQ3RDMxOTc1RTQ1Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqflZ/S7l5fgONCk0u0InHLIxsHgdD1UwZcFXr989QmDdi5oOJfiQgLqg7kVs
K3p87IVe8sNYNTPQiuM4xKZ/JQCWLQg1nMYwVljZq4zpxA9lral700wQSpCDt1Sp
a/jLKT3kRETh30ogzjHUHxdDflBSlV2cn+PzseVBPzSJxOqwyyF+OK0e7ikCFoEJ
N7B0fWd/vp2OoXUdBOAluuDrSvLQZRRgF4cQLrjhiRdNibhGg9hrYhEvciSty3jE
uxp6ss4N8qNMvD7Hbo+dWVo0s2koFYnh2Om0Av44FLU9vGSGW0Xg2gMTpZMhRcpF
jxjABuBI5+llTwujfudDGMQAzg==
-----END CERTIFICATE-----
Generated at Sat Apr 18 01:57:29 2026 by rpki-client